Apple’s Worldwide Developers Conference to kick off June 10 at 10 a.m. PDT with Keynote address

The Keynote will be available to stream on apple.com, the Apple Developer app, the Apple TV app, and the Apple YouTube channel. On-demand playback will be available after the conclusion of the stream.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

tgabe Author

Level 1

0 points

Can someone please read my EtreCheck report?

Problem description:

Fan running. Kernel_task running high. Did SMC/NVRAM reset. Also tried reinstalling OS X in recovery mode.

EtreCheck version: 2.4.1 (137)

Report generated 9/2/15, 7:27 PM

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)

MacBook Pro (Retina, 13-inch, Late 2013) (Technical Specifications)

MacBook Pro - model: MacBookPro11,1

1 2.4 GHz Intel Core i5 CPU: 2-core

8 GB RAM Not upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 MHz ok

BANK 1/DIMM0

4 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 341 - SN = C0140440HRBFT60A8

Video Information: (What does this mean?)

Intel Iris

Color LCD 2560 x 1600

System Software: (What does this mean?)

OS X 10.10.5 (14F27) - Time since boot: less than an hour

Disk Information: (What does this mean?)

APPLE SSD SD0256F disk0 : (251 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / : 249.78 GB (194.83 GB free)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 250.14 GB Online

USB Information: (What does this mean?)

Apple Internal Memory Card Reader

Apple Inc. iPhone

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. Apple Internal Keyboard / Trackpad

Thunderbolt Information: (What does this mean?)

Apple Inc. thunderbolt_bus

Configuration files: (What does this mean?)

/etc/sudoers - Modified

Gatekeeper: (What does this mean?)

Mac App Store and identified developers

Kernel Extensions: (What does this mean?)

/Applications/Webroot SecureAnywhere.app

[not loaded] com.webroot.driver.WebrootSecureAnywhere (105 - SDK 10.9) [Click for support]

Launch Agents: (What does this mean?)

[running] com.webroot.WRMacApp.plist [Click for support]

Launch Daemons: (What does this mean?)

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.cyberghostsrl.CyberghostPrivilegedHelper.plist [Click for support]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

[running] com.webroot.security.mac.plist [Click for support]

[running] com.webroot.webfilter.mac.plist [Click for support]

[running] vyprvpnservice.plist [Click for support]

User Launch Agents: (What does this mean?)

[failed] com.adobe.ARM.[...].plist [Click for support] [Click for details]

[loaded] com.google.keystone.agent.plist [Click for support]

User Login Items: (What does this mean?)

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Adguard UNKNOWN (missing value)

Internet Plug-ins: (What does this mean?)

FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]

npwebroot: Version: 2.0.15 [Click for support]

AdobePDFViewerNPAPI: Version: 11.0.12 - SDK 10.6 [Click for support]

AdobePDFViewer: Version: 11.0.12 - SDK 10.6 [Click for support]

Flash Player: Version: 16.0.0.305 - SDK 10.6 Outdated! Update

QuickTime Plugin: Version: 7.7.3

Default Browser: Version: 600 - SDK 10.10

SharePointBrowserPlugin: Version: 14.5.4 - SDK 10.6 [Click for support]

Silverlight: Version: 5.1.30317.0 - SDK 10.6 [Click for support]

Safari Extensions: (What does this mean?)

AdBlock

Photozoom V9.0

3rd Party Preference Panes: (What does this mean?)

None

Time Machine: (What does this mean?)

Time Machine not configured!

Top Processes by CPU: (What does this mean?)

5% WindowServer

2% Google Chrome Helper(4)

1% Google Chrome

0% taskgated

0% notifyd

Top Processes by Memory: (What does this mean?)

578 MB kernel_task

541 MB Google Chrome Helper(4)

147 MB Google Chrome

139 MB iTunes

123 MB mdworker(10)

Virtual Memory Information: (What does this mean?)

3.69 GB Free RAM

4.31 GB Used RAM (1.69 GB Cached)

0 B Swap Used

Diagnostics Information: (What does this mean?)

Sep 2, 2015, 07:17:10 PM /Library/Logs/DiagnosticReports/com.apple.AmbientDisplayAgent_2015-09-02-191710 _[redacted].crash

Sep 2, 2015, 07:15:21 PM Self test - passed

Sep 2, 2015, 05:45:15 PM /Library/Logs/DiagnosticReports/WSDaemon_2015-09-02-174515_[redacted].crash

Aug 31, 2015, 04:54:04 PM ~/Library/Logs/DiagnosticReports/SpotlightNetHelper_2015-08-31-165404_[redacted ].crash

MacBook Pro (Retina, 13-inch, Late 2013), OS X Yosemite (10.10.5)

Posted on Sep 2, 2015 5:30 PM

23 replies

tgabe Author

Level 1

0 points

Sep 3, 2015 12:21 PM in response to Eriasu65

Thanks for the suggestion. I fallowed your instructions, still shows up on EtreCheck. When I go into activity monitor,WSDaemon or WFDaemon are still running. Are you suggesting that this is what's causing my fan to run? I bought this Macbook pro brand new a little less than 2 years ago. Never has the fan done this, and never had any problems. Is there any other reports I can generate for you to get some feedback?

Thanks

tgabe Author

Level 1

0 points

Sep 3, 2015 12:28 PM in response to Eriasu65

Notice the CPU load.. Also, can someone explain the memory for me?

Lexiepex

Level 6

14,102 points

Sep 3, 2015 12:46 PM in response to tgabe

After you delete all these entries of webroot to Trash in Finder, you have to restart and then empty the Trash !

tgabe Author

Level 1

0 points

Sep 3, 2015 12:48 PM in response to Lexiepex

That's been done.

Lexiepex

Level 6

14,102 points

Sep 3, 2015 1:07 PM in response to tgabe

now another etrecheck list to see if we had everything.

John Galt

Level 10

142,000 points

Sep 3, 2015 1:28 PM in response to tgabe

Back up your Mac if you have not done so already. To learn how to use Time Machine read Mac Basics: Time Machine backs up your Mac - Apple Support.

The presence of "WSDaemon" indicates a component of the "Webroot" garbage remains. It may prove difficult to eradicate. During my limited testing of it I concluded their uninstallation instructions did not work, a typical problem with ill-conceived garbage. Kindly refer to this entire post for context: would like to know

Clearly kernel_task is running away. The reason for that may be related to Webroot, or not. A hardware problem may be the cause. Short of erasing that Mac and reconfiguring it from the ground up, there are some things you can do:

Run Apple Hardware Test. Only a report of a specific failure should be considered definitive.
- Apple Hardware Test is for Macs produced prior to June, 2013. Later Macs use Apple Diagnostics. They are invoked the same way, by holding the d key while starting your Mac. If the Mac shipped with discs, insert the disc bearing the label "AHT Version" or "Apple Hardware Test" and hold the d key while it starts.
- You must remove the firmware password, if one has been set, before you can use AHT.
Reset the SMC according toSMC reset. Read all the steps.

Before Resetting the SMC

Try each of the following steps in this order before you reset the SMC. Test the issue after completing each troubleshooting step to determine if the issue still occurs.

Press Command + Option + Escape to force quit any application that is not responding.
Put your Mac to sleep by choosing the Apple () menu from the upper-left menu bar and then choosing Sleep. Wake the computer after it has gone to sleep.
Restart your Mac by choosing the Apple () menu from the upper-left menu bar and then choosing Restart.
Shut down your Mac by choosing the Apple () menu from the upper-left menu bar and then choosing Shut Down.

Resetting the SMC on portables with a battery you should not remove on your own

Shut down the computer.
Plug in the MagSafe power adapter to a power source, connecting it to the Mac if it's not already connected.
On the built-in keyboard, press the (left side) Shift-Control-Option keys and the power button at the same time. The power adapter indicator light may cycle off / on once.
Release all the keys and the power button at the same time.
Press the power button to turn on the computer.

NVRAM reset:

Shut down your Mac.
Locate the following keys on the keyboard: Command (⌘), Option, P, and R. You will need to hold these keys down simultaneously in step 4.
Turn on the computer.
Press and hold the Command-Option-P-R keys before the gray screen appears.
Hold the keys down until the computer restarts and you hear the startup sound for the second time.
Release the keys.

After resetting NVRAM or PRAM, you may need to reconfigure your settings for speaker volume, screen resolution, startup disk selection, and time zone information. If issues persist, your Mac's logic board battery (not a portable Mac's rechargeable battery) may need to be replaced. The logic board battery helps retain NVRAM/PRAM settings when your computer is shut down. You can take your Mac to a Mac Genius or Apple Authorized Service Provider to replace the battery on the logic board.